General information
This privacy policy explains how mindflexzen (mindflexzen.info) collects and processes personal data from visitors and participants in courses and events. The policy applies to operations related to our services for entrepreneurs, business owners, and directors. Our administrative address is Soi Chumporn, Talat Yai Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand. For business inquiries call +66959741455. Business ID: 5648587478414. We describe categories of data collected, legal bases for processing, data sharing practices, retention periods, and how to exercise rights.
Definitions
The following definitions provide context for terms used throughout this policy, including the categories of data we process and the actors involved in providing services on mindflexzen.info.
Data collection
We collect data directly from users and automatically through technical logs and cookies. We may also receive limited data from trusted third-party service providers necessary to deliver course access, payment processing, analytics, and communications.
Data provided directly by users
When you register for an account, enroll in a course, or contact us, you may provide the following categories of personal data:
- Identification and contact details: full name, email address, telephone number, organization or position.
- Billing and transaction details needed for payments and invoicing.
- Profile and professional information supplied for course placement or networking purposes.
- Registration preferences, session choices, and consent records for communications.
- Optional personal reflections or survey responses submitted as part of course activities.
- Support correspondence and feedback provided via email or contact forms.
Automatically collected data
We collect technical and usage data when you interact with mindflexzen.info to operate the service, improve functionality, and maintain security.
- Device and browser information (device type, browser version, operating system).
- Log data and IP address, time stamps, and pages visited on the site.
- Cookie identifiers and preferences relevant to site settings and analytics.
- Usage metrics such as session duration and feature interactions.
- Aggregate or anonymized data derived from usage patterns for service improvement.
- Error and diagnostic information captured for maintenance and troubleshooting.
Third-party sources
We may receive information from third-party providers that support operations, payments, and analytics. We limit such data to what is necessary to perform contracted services.
- Payment processors and business services to complete transactions and manage invoicing.
- Analytics and hosting providers that collect aggregated usage data to help us optimize the site experience.
- Third-party tools integrated for registration, email delivery, and calendar scheduling.
Purposes of processing
We process personal data for specific, limited purposes aligned with providing and improving our services, complying with legal obligations, and maintaining user communications.
- To register users, manage course enrollments, deliver course content, and provide access to digital resources.
- To process payments, issue invoices, and manage business records associated with course fees.
- To communicate operational information such as course schedules, updates, and administrative notices.
- To perform analytics and site performance monitoring to improve the platform and user experience.
- To handle support requests, feedback, and dispute resolution related to service delivery.
- To meet legal, tax, and regulatory obligations applicable to business operations in Thailand and internationally.
- To protect the security and integrity of the platform and detect, prevent, or respond to incidents.
- To generate anonymized reports for internal planning and to inform course development.
Legal bases for processing
Where relevant laws apply, we rely on appropriate legal bases to process personal data. These bases are described in general terms below.
- Contractual necessity: processing required to provide courses, manage enrollments, and fulfill service agreements.
- Legitimate interests: processing for platform maintenance, security, fraud prevention, and business operations where interests are balanced with user privacy.
- Consent: where optional communications or profiling are concerned, we rely on clear consent and provide opt-out mechanisms.
- Legal obligations: processing necessary to comply with applicable legal, tax, or regulatory requirements.
Applicable rights and regional frameworks
For individuals subject to the EU General Data Protection Regulation or similar frameworks, the following rights are recognized. Availability of specific rights depends on local law and the nature of the processing.
- Right of access: request a copy of personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of personal data where lawful and appropriate.
- Right to restriction and objection: request restriction of processing or object to certain processing activities.
- Right to data portability: request transfer of data to another controller in a structured format where applicable.
- Right to lodge a complaint with a supervisory authority where applicable in your jurisdiction.
Cookies and similar technologies
mindflexzen uses cookies and similar tracking technologies to support essential site functions, remember preferences, and analyze usage. You can manage cookie preferences through your browser and, where provided, site controls.
Types of cookies used include session cookies for navigation, persistent cookies for preferences, and third-party cookies for analytics and marketing integrations where consent has been provided.
Cookies are categorized as necessary, performance/analytics, functionality, and marketing. Necessary cookies are required for the site to function; other categories support optional features and measurement.
You can control cookies through your browser settings and, where available, the cookie consent tool on the site. Disabling certain cookies may affect functionality such as saved preferences or enrollment workflows.
Full cookie policy
Data sharing and recipients
We share personal data only with parties that perform services on our behalf or where required by law. Sharing is limited to necessary data and governed by contracts or privacy safeguards.
- Service providers such as hosting operators, course delivery platforms, and customer support vendors.
- Payment processors and management partners for transaction handling and invoicing.
- Analytics and email delivery providers to support communications and site analytics.
- Professional advisors, auditors, or legal representatives when required for compliance or dispute resolution.
- Affiliates or partners for coordination of jointly delivered programs, where participants have been informed.
- Government, tax, or law enforcement authorities when disclosure is legally required.
International transfers
Data processed by mindflexzen may be transferred to and stored in jurisdictions outside Thailand for hosting, analytics, or support services. Transfers occur only when necessary for service provision and under contractual or technical safeguards.
When transfers to other jurisdictions occur, we use appropriate safeguards such as data processing agreements, standard contractual clauses where available, encryption, and access controls to help protect personal data.
Data retention
We retain personal data only for the period necessary to fulfill the purposes described in this policy and to comply with legal and accounting requirements.
Account and profile data are retained for as long as the account is active and for a reasonable period afterward to address administrative needs, typically up to several years where required for recordkeeping.
Communications and support correspondence are retained for the period necessary to resolve issues and for a limited retention period thereafter in line with business administration practices.
Technical logs and backups are retained for operational maintenance, security monitoring, and forensic purposes for a limited period defined by infrastructure policies.
When personal data is no longer required, we remove or anonymize it in accordance with secure deletion practices unless retention is required by law.
Security of personal data
We maintain organizational, technical, and administrative measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Security measures are regularly reviewed and updated in line with operational best practices.
- Encryption of data in transit and, where appropriate, at rest using standard protocols.
- Access controls and role-based permissions limiting data access to authorized personnel only.
- Regular operational reviews, software updates, and vulnerability management procedures.
Your rights
You may exercise rights described in this policy by contacting us. We will respond in a reasonable timeframe and provide information about any applicable procedures or verification steps.
- Access, correction, and data deletion requests where applicable under local law.
- Withdraw consent for optional processing, opt out of marketing communications, and manage cookie preferences.
- lodge a complaint with a relevant supervisory authority if you believe your rights have been infringed.
- Right to restriction of processing: You may request limited processing of your personal data while a dispute about accuracy or lawfulness is being resolved.
- Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of personal data in a structured, commonly used, machine-readable format.
- Right to object: You can object to processing based on legitimate interests or direct marketing purposes; we will assess and respond to such requests in line with applicable law.
- Right to withdraw consent: If processing is based on consent, you may withdraw that consent at any time; withdrawal does not affect processing carried out prior to withdrawal.
- Right to lodge a complaint: If you believe your rights have been infringed, you may file a complaint with the relevant supervisory authority in Thailand or another competent regulator.
How to exercise your privacy rights
To submit a request related to your personal data (access, correction, deletion, restriction, portability, objection or withdrawal of consent), contact our data protection contact. Include sufficient information to identify yourself and describe the request. We may need additional information to verify your identity.
We will acknowledge receipt of rights requests promptly and aim to provide a substantive response within 30 days of verification. Complex requests may require an extended period; we will inform you if more time is needed.
Marketing communications
mindflexzen may use your contact details to send information about courses, events, newsletters and related offers where you have opted in. Marketing communications may include email, SMS and phone contact subject to your consent and local regulations.
You may opt out of marketing communications at any time by following the unsubscribe link in emails, replying STOP to SMS, or contacting our privacy contact. Opting out will not affect transactional or administrative messages necessary to provide services you requested.
Children's privacy
mindflexzen services are intended for adults. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a minor without appropriate parental consent, we will take steps to delete that data in accordance with applicable law.
Links to third-party sites
Our website may contain links to third-party sites and services. mindflexzen is not responsible for third-party privacy practices or content. Review the privacy policies of any external site you visit to understand their data handling.
Changes to this privacy policy
We may update this privacy statement to reflect changes in practices, legal requirements, or service features. When material changes occur we will post a notice on the site and update the effective date. Continued use after changes constitutes acceptance of the updated policy.
Contact and privacy inquiries
Contact our privacy team at mindflexzen: address: Soi Chumporn, Talat Yai Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand; phone: +66959741455; business ID: 5648587478414; email: [email protected]. Specify the nature of your request and provide any supporting details.